<p><strong>TLDR:</strong> The pnpm team announced their Rust rewrite is now faster than the JavaScript implementation across all benchmark scenarios. Vite 8 replaced its esbuild/Rollup dual-bundler setup with Rolldown, a single Rust-based bundler, with real-world build times dropping as much as 8x. Greg Kroah-Hartman presented at RustWeek 2026 arguing that a new <code>Untrusted&lt;T&gt;</code> type could push Rust’s kernel CVE coverage from ~60% to ~80%. Wild Linker 0.9 landed with early Mach-O and WebAssembly target support plus a linker plugin API compatible with GNU LD and Mold.</p>
<hr>
<h2>Vite 8 ships Rolldown, drops the dual-bundler setup</h2>
<p>Vite 8 replaces esbuild for dev and Rollup for production with Rolldown, a single Rust-based bundler. Real-world improvements range from 57% to 8x faster builds — one reported case went from 46 seconds to 6 seconds. Plugin API compatibility is maintained, and there’s a built-in migration layer for existing esbuild and Rollup options. Vite 8 is positioning itself as the framework-agnostic answer to Turbopack, and with 65 million weekly downloads, Rolldown is about to get a serious production workout.</p>
<h2>Greg KH’s <code>Untrusted&lt;T&gt;</code> proposal at RustWeek 2026</h2>
<p>Greg Kroah-Hartman presented a new Rust type called <code>Untrusted&lt;T&gt;</code>, developed with Benno Lossin, that attaches a compile-time marker to data arriving from user space or hardware. The idea is to force explicit validation before that data can be used anywhere in the kernel — zero runtime overhead, enforced at compile time. Rust already handles around 60% of kernel bugs by catching unchecked error returns and forgotten lock releases; this type is meant to push that to roughly 80% of CVEs. The patches are queued in a dedicated <code>untrusted</code> branch of driver-core.git and are targeting the Linux v7.2 merge window, though the type still requires compiler changes and depends on field projection work that isn’t merged yet.</p>
<h2>Wild Linker 0.9 adds plugin API and new platform targets</h2>
<p>Wild 0.9 adds support for the Linker Plug-in API compatible with GNU LD and Mold, which enables linker-plugin LTO and opens the door for future extensibility. The release also includes in-progress Mach-O and WebAssembly target support, and the internals were refactored to separate ELF-specific logic from platform-specific behavior. No major performance changes in this release — this one is about broadening the platform story.</p>
<h2>ClickHouse replaces its Delta Lake implementation with delta-kernel-rs</h2>
<p>ClickHouse swapped out its native Delta Lake implementation for the Rust Delta Kernel (<code>delta-kernel-rs</code>), offloading protocol handling to a shared abstraction layer. The migration enabled ACID writes, schema evolution, time travel with Change Data Feed, partition pruning, and statistics-based data skipping. The engineering work was non-trivial: vendoring all crates, handling OpenSSL static linking, fixing cross-compilation issues, and dealing with sanitizer symbol failures when embedding a Rust library into a C++ codebase with strict build constraints. The team also contributed upstream improvements including dynamic logging configuration and async metadata processing.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>pnpm Rust rewrite:</strong> The pnpm team confirmed their Rust rewrite is now faster than the original JavaScript implementation across all benchmark scenarios.</li>
<li><strong>Rust 2025H2 project goals wrap-up:</strong> The Rust Project’s 2025H2 goal period closed out 41 goals including 13 flagship items; notable progress on Pin ergonomics, Polonius borrow checker stabilization, field projections, and the next-generation trait solver.</li>
<li><strong>RHEL 10.2 ships Rust Toolset 1.92:</strong> The release also includes PostgreSQL 18 with async I/O, Python 3.14 with free-threaded mode, and Go 1.26 with the Green Tea GC.</li>
<li><strong>Bun Rust port fixes a critical memory leak:</strong> The Bun JavaScript runtime’s Rust port resolved at least one critical memory leak, per a community post this week.</li>
<li><strong>cargo-crap:</strong> A revival of the 2007 CRAP (Change Risk Anti-Patterns) metric as a Cargo tool — combines cyclomatic complexity with test coverage to surface risky, under-tested functions, which is increasingly relevant when AI agents generate complex code without meaningful tests.</li>
<li><strong>GNOME Commander 2.0:</strong> Rewritten from C++ to Rust with a GTK4 migration, adding an embedded terminal, redesigned quick search, and improved Wayland support.</li>
<li><strong>wrkflw 0.2:</strong> A local GitHub Actions runner in Rust built as a 16-crate Cargo workspace; makes Docker optional and includes a secure emulation mode that sandboxes commands without a container runtime.</li>
<li><strong>Wild Linker WebAssembly target:</strong> In-progress Wasm target support is part of the 0.9 release alongside the Mach-O work.</li>
<li><strong>jsongrep:</strong> A Rust CLI and library for querying JSON, YAML, TOML, JSONL, CBOR, and MessagePack using a declarative path query language that compiles to a DFA; benchmarked against jq, jmespath, and jql on 190 MB files.</li>
<li><strong>pg_mentat 1.3.0:</strong> A PostgreSQL extension (via pgrx) implementing Datomic’s data model with full Datalog query compilation, time travel, and soft integrations with pgvector, PostGIS, and pg_trgm.</li>
<li><strong>Marcli:</strong> A Rust library for rendering CommonMark Markdown as ANSI terminal output using comrak and syntect, with six dependencies and no async runtime.</li>
<li><strong>100K lines of Rust with AI agents:</strong> A developer reports building a 130K-line multi-Paxos consensus engine over ~3 months using Claude Code and Codex CLI, with AI-driven contract generation boosting throughput from 23K to 300K ops/sec.</li>
</ul>


Rust language updates, async patterns, and systems programming.

Rust Digest

A roundup of Rust ecosystem news: pnpm's Rust rewrite now outperforms its JavaScript predecessor across all benchmarks. Vite 8 ships with Rolldown, a single Rust-based bundler replacing the esbuild/Rollup dual setup, delivering up to 8x faster build times. Greg Kroah-Hartman proposed an `Untrusted<T>` type for the Linux kernel at RustWeek 2026 to push Rust's CVE coverage from ~60% to ~80% via compile-time validation of untrusted data. Wild Linker 0.9 adds a plugin API compatible with GNU LD and Mold, plus early Mach-O and WebAssembly target support. ClickHouse migrated its Delta Lake implementation to delta-kernel-rs. Additional items cover Rust 2025H2 project goals, RHEL 10.2 tooling updates, GNOME Commander 2.0 rewritten in Rust, and various community tools.

pnpm's Rust rewrite beats the original, Vite 8 ships Rolldown